APT

[ CVE-2019-11510 ]

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

https://github.com/projectzeroindia/CVE-2019-11510

[ CVE-2020-5902 ]

exploit code for F5-Big-IP (CVE-2020-5902)

https://github.com/yasserjanah/CVE-2020-5902

[ CVE-2019-19781 ]

A Citrix Application Delivery Controller (ADC) and Gateway directory traversal vulnerability, which can lead to remote code execution without credentials.

https://github.com/projectzeroindia/CVE-2019-19781

[ CVE-2020-8193 ]

Citrix-Scanner

https://github.com/PR3R00T/CVE-2020-8193-Citrix-Scanner

[ citrix_adc_netscaler_lfi_scan ]

https://github.com/Zeop-CyberSec/citrix_adc_netscaler_lfi

[ CVE-2019-0708 ]

A remote code execution vulnerability exists in Remote Desktop Services

https://github.com/CVE-2019-0708/CVE-2019-0708

[ CVE-2020-15505 ]

https://github.com/iamnoooob/CVE-Reverse/tree/master/CVE-2020-15505

Exploit Active Directory for Lateral Movement and Credential Access:

[ CVE-2020-1472 ]

Checker & Exploit Code for CVE-2020-1472 aka Zerologon

https://github.com/VoidSec/CVE-2020-1472
https://github.com/dirkjanm/CVE-2020-1472

[ CVE-2019-1040 ]
scanner

Checks for CVE-2019-1040 vulnerability over SMB. The script will establish a connection to the target host(s) and send an invalid NTLM authentication.

https://github.com/fox-it/cve-2019-1040-scanner

Exploit public-facing servers: Attackers use these vulnerabilities to bypass authentication in web servers, email servers, or DNS to remotely execute commands on the internal network. For compromised web servers, attackers can utilize them in watering-hole attacks to target future visitors.

[ CVE-2020-1350 ]

The Windows DNS server SigRed vulnerability allows attackers to spread laterally through a network.

https://github.com/ZephrFish/CVE-2020-1350

[ CVE-2018-6789 ]

Exim CVE-2018-6789

PoC materials to exploit CVE-2018-6789.

https://github.com/synacktiv/Exim-CVE-2018-6789

[ CVE-2018-4939 ]

https://nickbloor.co.uk/2018/06/18/another-coldfusion-rce-cve-2018-4939

Exploit internal servers: These vulnerabilities are used to spread laterally throughout a network and gain access to internal servers, where the attackers can steal valuable data.

[ CVE-2020-0688 ]
- A Microsoft Exchange vulnerability that allows authenticated users to perform remote code execution

https://github.com/ravinacademy/CVE-2020-0688

[ CVE-2015-4852 ]
 - The WLS Security component in Oracle WebLogic15 Server allows remote attackers to execute arbitrary commands via a crafted serialized Java16 object.

https://github.com/roo7break/serialator

[ CVE-2020-2555 ]
- A vulnerability exists in the Oracle® Coherence product of Oracle Fusion® Middleware. This easily exploitable

https://github.com/Y4er/CVE-2020-2555

[ CVE-2019-3396 ]
 - A server-side template injection vulnerability is present in the Widget Connector in Atlassian Confluence servers that allows remote attackers to perform remote code execution and path traversal.

https://github.com/jas502n/CVE-2019-3396

[ CVE-2019-11580 ]
- Attackers who can send requests to an Atlassian® Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, permitting remote code execution. This vulnerability was used in GandCrab ransomware attacks in the past.

https://github.com/jas502n/CVE-2019-11580

[ CVE-2019-18935 ] 
- A vulnerability in Telerik 19 UI for ASP.NET AJAX can lead to remote code execution. It was seen used by a hacker group named 'Blue Mockingbird' to install Monero miners on vulnerable servers but could be used to spread laterally as well.

https://github.com/noperator/CVE-2019-18935


[CVE-2018-19276]

https://github.com/mpgn/CVE-2018-19276

[CVE-2020-0796]

https://github.com/danigargu/CVE-2020-0796
https://github.com/ZecOps/CVE-2020-0796-RCE-POC


[cve-2020-7247]
OpenSMTPD
https://github.com/FiroSolutions/cve-2020-7247-exploit

[CVE-2020-16898]
 “Bad Neighbor”
 https://github.com/advanced-threat-research/CVE-2020-16898


[CVE-2020-14750]

https://github.com/pprietosanchez/CVE-2020-14750


CVE-2020–14882

https://github.com/jas502n/CVE-2020-14882


[ RCE Scripts for various SD-WAN Vendors ]


https://github.com/RealmodeLabs/SD-PWN/blob/master/silver_peak_unity_orchestrator_rce.py



[ CVE-2020-8209 ]

https://github.com/B1anda0/CVE-2020-8209

[CVE-2020-4463]
https://github.com/Ibonok/CVE-2020-4463

[CVE-2018-13379]

https://github.com/milo2012/CVE-2018-13379